PT-2024-28707 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of user-supplied data, which can result in a memory corruption condition. This can be exploited if a target visits a...

PT-2024-5452 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to a buffer overflow in the heap of the OLE DB driver for SQL Server. This can allow a remote attacker to execute arbitrary code...

PT-2024-4797 · Microsoft · Windows Image Acquisition +1

Name of the Vulnerable Software and Affected Versions: Windows Image Acquisition affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Image Acquisition service. It is caused by incorrect handling of symbolic links before...

PT-2024-4742

Name of the Vulnerable Software and Affected Versions: Xbox Wireless Adapter for Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. This could potentially...

PT-2024-5472 · Microsoft · Windows Powershell +1

Name of the Vulnerable Software and Affected Versions: Windows PowerShell affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system's PowerShell command-line shell. It allows an attacker to elevate their privileges. There is...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

PT-2024-4741 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to the Azure DevOps Server development software and is associated with a lack of protection for the web page structure. This can allow a remote attacker to...

PT-2024-4980 · Microsoft · Windows Performance Data Helper Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Performance Data Helper Library affected versions not specified Description: The issue is related to an integer overflow in the Performance Data Helper library of the Windows operating system. It allows a remote attacker to...

PT-2024-26105 · Sap · Sap Netweaver Knowledge Management Xmleditor

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Knowledge Management XMLEditor affected versions not specified Description: The issue is due to weak encoding of user-controlled input in the SAP NetWeaver Knowledge Management XMLEditor, allowing malicious scripts to be execute...

PT-2024-9861 · Sap · Sap Business Warehouse - Business Planning/Simulation

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse - Business Planning and Simulation affected versions not specified Description: The issue is related to insufficient encoding of user-controlled inputs in the SAP Business Warehouse - Business Planning and Simulation...

PT-2024-9859 · Sap · Sap S/4Hana Finance

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Finance Advanced Payment Management affected versions not specified Description: The issue is related to a lack of necessary authorization checks for authenticated users, resulting in escalation of privileges. This has a low impac...

PT-2024-19950 · Hcl · Hcl Nomad Server

Name of the Vulnerable Software and Affected Versions: HCL Nomad server on Domino affected versions not specified Description: The issue is related to the HCL Nomad server on Domino, which fails to properly handle users configured with limited Domino access. This failure can result in a possible...

PT-2024-24987 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue allows an authenticated user to recover another user's credentials under certain circumstances. Recommendations: At the moment, there is n...

PT-2024-24830 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue involves unnecessary user details being provided within system logs under certain circumstances. Recommendations: At the moment, there is no information about a newer version...

PT-2024-19848 · Qualcomm · Snapdragon +98

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when invoking an IOCTL call for GPU memory allocation. This happens when the size parameter is greater...

PT-2024-4816 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted sessio...

PT-2024-24279 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS and 9.3 CD Description: The issue allows an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. Recommendations: For IBM MQ versions 9.3 LTS and 9.3 CD, a...

PT-2024-28058 · Nxp · Nxp Data Co-Processor

Name of the Vulnerable Software and Affected Versions: NXP Data Co-Processor DCP affected versions not specified Description: The issue concerns the NXP Data Co-Processor DCP, a built-in hardware module for specific NXP SoCs that implements a dedicated AES cryptographic engine for...

PT-2024-27875 · Concept Intermedia · S@M Cms

Name of the Vulnerable Software and Affected Versions: S@M CMS Concept Intermedia affected versions not specified Description: The issue concerns a Reflected XSS vulnerability that can be exploited by including scripts in one of the GET header parameters. It is noted that only a part of the...

PT-2024-19028 · Artery · Artery At32F415Cbt7 +1

Name of the Vulnerable Software and Affected Versions: Artery AT32F415CBT7 Artery AT32F421C8T7 Description: The issue is related to Incorrect Access Control. Recommendations: For Artery AT32F415CBT7, at the moment, there is no information about a newer version that contains a fix for this issue...